Local Domain Name Service System and Method for Providing Service Using Domain Name Service System

• US 20090055929A1
• Filed: 02/21/2006
• Published: 02/26/2009
• Est. Priority Date: 02/21/2005
• Status: Abandoned Application

• Current Assignee: Netpia.Com, Inc.
• Original Assignee: Netpia.Com, Inc.
• Inventors: Won, Jong Ho, Lee, Suk Moon, Lee, Pan Jung, Bae, Jeen Hyun
• Application Number:
  US11/816,683
• Publication Number:
  US 20090055929A1
• Time in Patent Office: Days
• US Class Current: 726/23
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories

Abstract

Provided is a local domain name system for querying an external server for a client-requested domain name and providing desired data to a user. A determination is made as to whether a special policy is to be applied to a client-input query through a test task. When a special policy is to be applied to the query, the special policy is performed to provide additional service to the client.

Claims

1. A local domain name system for querying an external server for a client-requested domain name and providing desired data to a user, the system comprising:

a determining/policy performing unit for determining whether a special policy is to be applied to the query, providing the client with service for blocking access or enabling access to a specific website when a special policy is to be applied to the query, and delivering the query to a domain-IP resolution processor when a special policy is not to be applied to the query; and

a domain-IP resolution processor connected to the determining/policy performing unit for receiving the query and resolving the domain name into a corresponding IP address to deliver the IP address to the user.

2. The system of claim 1, further comprising a database for storing domain name information of unresponsive external servers,

wherein the determination as to whether a special policy is to be applied to the query is made based on a determination as to whether the query requires access to the unresponsive external server by referring to the database.

3. The system of claim 1, further comprising a database for storing an analysis result for a characteristic of each header content of DNS data for each malicious program,

wherein the determination as to whether a special policy is to be applied to the query is made based on a determination as to whether the query belongs to the malicious program.

4. The system of claim 1, wherein the determination as to whether a special policy is to be applied to the query is made based on a determination as to whether there is an IP address corresponding to the user-input query, in which it is determined that a special policy is to be applied to the query when there is no IP address corresponding to the user-input query.

5. The system of claim 1, further comprising a database for storing domain name information for a specific domain or query format,

wherein the determination as to whether a special policy is to be applied to the query is made based on a determination as to whether the query includes domain information for a specific domain or query format by referring to the database.

6. The system of claim 1, wherein the determination as to whether a special policy is to be applied to the query is made by checking an amount of traffic for each domain name at uniform intervals to form a list of domains for which an amount of traffic ranks in an upper level or rapidly increases, and by determining whether each website in the list distributes a malicious program when an amount of traffic of the website exceeds a predetermined value.

7. The system of claim 1, wherein the determining/policy performing unit comprises an internal database in a circular queue form or is connected to an external database.

8. The system of claim 1, wherein the determining/policy performing unit sets a predetermined data storage criterion using data use frequency and reference time, stores the data storage criterion in a database, and deletes data that does not meet the criterion from the database.

9. A local domain name system for querying an external server for a client-requested domain name and providing desired data to a user, the system comprising:

a database for storing IP addresses of clients that use the Internet; and

a determining/policy performing unit connected to the database for classifying IP addresses of the clients into groups by referring to the database, allocating a pre-determined time to each group, and enabling access to a specific webpage for the allocated time.

10. A local domain name system for querying an external server for a user-requested domain name and providing desired data to a user, the system comprising:

a determining/policy performing unit for determining whether the user'"'"'s input query includes domain name information about a unresponsive external server or a blocked site, and providing service for blocking access or enabling access to a specific website when the query includes the domain name information; and

a domain-IP resolution processor connected to the determining/policy performing unit for receiving the query and resolving the domain name to a corresponding IP address using the external server when the query does not contain the domain name information.

11. The system of claim 10, further comprising a database for storing an analysis result for a characteristic of each header content of DNS data for each malicious program,

wherein the determining/policy performing unit further determines whether the user'"'"'s input query belongs to the malicious program.

12. A method for providing service using a local domain name system for querying an external server for a client-requested domain name and providing desired data to a user, the method comprising the steps of:

when the client-requested query is input, determining whether a special policy is to be applied to the query; and

providing the client with service for blocking access or enabling access to a specific website when a special policy is to be applied to the query, and discovering an IP address corresponding to the domain name to deliver the IP address to the client when a special policy is not to be applied to the query.

13. The method of claim 12, wherein the step of determining whether a special policy is to be applied to the query comprises the step of determining whether the query belongs to a malicious program by referring to a database which stores an analysis result for a characteristic of each header content of DNS data for each malicious program.

14. The method of claim 12, wherein the step of determining whether a special policy is to be applied to the query is made based on a determination as to whether there is an IP address corresponding to the user-input query, and when there is no IP address corresponding to the user-input query, a special policy is to be applied to the query.

15. A method for providing service using a local domain name system for querying an external server for a client-requested domain name and providing desired data to a user, the method comprising the steps of:

determining whether the user s input query includes domain information about a unresponsive external server or information on a blocked site; and

providing service for blocking access or enabling access to a specific website when it is determined that the query includes domain name information about a unresponsive external server or the blocked site, and receiving the query to resolve the domain name to a corresponding IP address using the external server when it is determined that the query does not include domain name information about a unresponsive external server or a blocked site.